RE: Listener on ports 137, 138, 139

["Bruyere, Michel" <mbruyere () ezemcanada com>]

Hi, 
        Its only netbios that is listening, in other words,  file and print
sharing. For the address you are seeing, its the default address given when
you are set to use DHCP but no DHCP server was found. In your case its
before you connect to your ADSL provider which will give you a "real" IP.

Hope this help 


-----Original Message-----
From: Rune Berntzen [mailto:rbern8 () online no] 
Sent: mardi 15 octobre 2002 13:27
To: Security Basics
Subject: Listener on ports 137, 138, 139


Hi all,

When checking port activity using TCPView I notice that I have a = listener
on ports 137,138 and 139. The Local Address seems  to be from a Class B
network, 169.254.0.0, = which I trace to something called=20

BLACKHOLE-1.IANA.ORG

using SmartWhois.

The funny thing is that the LISTENING  entries are visible in TCPView = even
before I connect to my ADSL provider.

Anybody has an idea about what this can be.

BTW, I am running Norton Internet Security 2001 with updatet virus =
definitions.

Thanks in advance,
Rune